org.springframework.cloud:spring-cloud-stream@5.0.1
latest version
5.0.3
latest non vulnerable version
first published
10 years ago
latest version published
8 days ago
licenses detected
- [1.0.0.RELEASE,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.springframework.cloud:spring-cloud-stream package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization. An attacker can execute arbitrary code or manipulate application behavior by supplying specially crafted input that is deserialized without proper validation. How to fix Deserialization of Untrusted Data? Upgrade | [4.2.0,5.0.3) |
Affected versions of this package are vulnerable to Incorrect Authorization in the partition interceptor. An attacker can cause unauthorized modification or disclosure of message data by manipulating the message sending process. How to fix Incorrect Authorization? Upgrade | [4.2.0,5.0.3) |
Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging. An attacker can access sensitive information by reviewing application logs under certain conditions. How to fix Insertion of Sensitive Information into Log File? Upgrade | [4.2.0,5.0.3) |
Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper restriction of the dynamic destination cache size. An attacker can cause unintended information disclosure or modification by exploiting the lack of proper bounds on the cache size when interacting with dynamic destinations. How to fix Allocation of Resources Without Limits or Throttling? Upgrade | [4.2.0,5.0.3) |